Start of Content Area

Background documentation User Administration Tools  Locate the document in its SAP Library structure

The user administration tools for the AS Java allow both offline and runtime user administration.

User Administration Tools

Tool

Detailed Description

Further Information

Visual Administrator

A standalone graphical user interface (GUI) that enables local and remote management of users and groups at runtime and on the whole cluster, all cluster elements, and all modules running on them.

Administration Manual:

      Visual Administrator

      AS Java User Management Using the Visual Administrator

Identity Management

Also known as the user administration console, it is a Web Dynpro-based tool that provides functions for managing users, groups, roles, and user-related data in the user management engine (UME).

You can use the functions supplied with this tool from a Web client, such as a Web browser.

Administration Manual:

      Identity Management

Shell Console Administrator

A command line tool that enables remote administration from Telnet clients.

The default AS Java configuration enables only Administrator users to use telnet.

Administration Manual:

      Shell Console Administrator

      Connecting and Working Using Telnet

Config Tool

An XML-based tool that enables offline configuration of AS Java cluster elements. Changes made using this tool must be exported to the engine database and take effect after engine restart. This tool does not support remote administration of J2EE Engines.

Administration Manual:

      Config Tool

Remote User Administration During Runtime

User management during server runtime enables efficient and scalable user management for your productive systems. Furthermore, remote user administration facilitates security management of individual J2EE Engines, for example, when running in a cluster. Therefore, the AS Java provides the following administration tools that allow remote user management during server runtime:

      Shell Console Administrator

      Visual Administrator

      Identity Management

For an overview and comparison of the available functions for these runtime user administration tools, see the table below:

Function

Shell Console Administrator

Visual Administrator

Identity Management

Create, view, or delete users

Yes

Yes

Yes

Search for users

No

Yes

Yes

Import users from external systems

No

No

Yes

Replicate users to SAP systems

No

No

Yes

Lock or unlock users

No

Yes

Yes

List locked users

No

Yes

Yes

Change user passwords

Yes

Yes

Yes

Define password rules

No

Yes

Yes

Require password change

No

Yes

Yes

Create, delete and manage groups and group members

Yes

Yes

Yes

Assign a public-key certificate to a user

Yes

Yes

Yes

Assign roles to users

No

Yes

Yes

Assign UME actions to roles

No

No

Yes

Configure user stores

Yes

Yes

Yes

 

See also:

Administration Manual:

      Administration of Users and Roles

      AS Java User Management Using the Visual Administrator

      Shell Console Administrator

End of Content Area